#                   version: 7.19.2 (stable)
#          factory-software: 6.44
#              total-memory: 128.0MiB
#                       cpu: MIPS 74Kc V5.0
#                 cpu-count: 1
#           total-hdd-space: 16.0MiB
#         architecture-name: mipsbe
#                board-name: hEX PoE
#                  platform: MikroTik
#   installed-version: 7.19.2
# 
# software id = T8MS-WNDU
#
# model = RB960PGS
# serial number = CB540C2AD20D
/interface bridge
add admin-mac=48:8F:5A:68:17:66 auto-mac=no comment=defconf name=BR-SOMNET port-cost-mode=short
/interface ethernet
set [ find default-name=ether1 ] name="ether1-WAN TRONCAL"
set [ find default-name=ether2 ] disabled=yes
set [ find default-name=ether3 ] name="ether3-LAN BERNARDO"
/interface lte apn
set [ find default=yes ] ip-type=ipv4 use-network-apn=no
/snmp community
add addresses=::/0 name=SNMP-SOMNET
/system logging action
add name=GrafanaLoki remote=172.20.0.254 remote-log-format=syslog remote-port=1514 src-address=172.20.1.100 target=remote
/interface bridge port
add bridge=BR-SOMNET comment=defconf ingress-filtering=no interface="ether1-WAN TRONCAL" internal-path-cost=10 path-cost=10
add bridge=BR-SOMNET comment=defconf ingress-filtering=no interface=ether2 internal-path-cost=10 path-cost=10
add bridge=BR-SOMNET comment=defconf ingress-filtering=no interface="ether3-LAN BERNARDO" internal-path-cost=10 path-cost=10
add bridge=BR-SOMNET comment=defconf ingress-filtering=no interface=ether4 internal-path-cost=10 path-cost=10
add bridge=BR-SOMNET comment=defconf ingress-filtering=no interface=ether5 internal-path-cost=10 path-cost=10
add bridge=BR-SOMNET comment=defconf ingress-filtering=no interface=sfp1 internal-path-cost=10 path-cost=10
/ip firewall connection tracking
set udp-timeout=10s
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/ip settings
set max-neighbor-entries=8192
/ipv6 settings
set max-neighbor-entries=8192
/interface ovpn-server server
add auth=sha1,md5 mac-address=FE:8F:21:A2:1F:C0 name=ovpn-server1
/ip address
add address=172.20.1.100/16 interface=BR-SOMNET network=172.20.0.0
/ip dns
set servers=1.1.1.2,1.0.0.2
/ip ipsec profile
set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=172.20.1.1
/ip service
set ftp disabled=yes
set telnet disabled=yes
set www port=8080
set api disabled=yes
set api-ssl disabled=yes
set ssh port=46825
/radius
add address=172.20.6.1 secret=Fr3eR4d!u5 service=login src-address=172.20.1.100
/routing bfd configuration
add disabled=no interfaces=all min-rx=200ms min-tx=200ms multiplier=5
/snmp
set enabled=yes trap-community=SNMP-SOMNET trap-version=2
/system clock
set time-zone-name=America/Mexico_City
/system identity
set name=SW-BERNARDO-SNDIEGO
/system logging
add action=GrafanaLoki prefix=172.20.1.100 topics=critical
add action=GrafanaLoki prefix=172.20.1.100 topics=error
add action=GrafanaLoki prefix=172.20.1.100 topics=info
add action=GrafanaLoki prefix=172.20.1.100 topics=warning
/system ntp client
set enabled=yes
/system ntp client servers
add address=0.mx.pool.ntp.org
add address=1.mx.pool.ntp.org
/tool graphing interface
add
/tool graphing resource
add
/user aaa
set default-group=full use-radius=yes